By Mr. Moore, a petition (accompanied by bill, Senate, No. 45) of Michael O. Moore, Joanne M. Comerford, Rebecca L. Rausch, James B. Eldridge and others for legislation to establish the Massachusetts Data Privacy Protection Act. Advanced Information Technology, the Internet and Cybersecurity.
By Mr. Tarr, a petition (accompanied by bill, Senate, No. 289) of Bruce E. Tarr for legislation to ensure internet security and privacy. Consumer Protection and Professional Licensure.
By Mr. Moore, a petition (accompanied by bill, Senate, No. 47) of Michael O. Moore for legislation to prohibit surveillance pricing based on the biometric data of individuals collected on the premises of a food store and food department. Advanced Information Technology, the Internet and Cybersecurity.
By Mr. Montigny, a petition (accompanied by bill, Senate, No. 43) of Mark C. Montigny for legislation to protect personal biometric data. Advanced Information Technology, the Internet and Cybersecurity.
By Ms. Creem, a petition (accompanied by bill, Senate, No. 29) of Cynthia Stone Creem, Rebecca L. Rausch, Joanne M. Comerford, James B. Eldridge and other members of the Senate for legislation to establish the Massachusetts Data Privacy Protection Act. Advanced Information Technology, the Internet and Cybersecurity.
By Mr. Finegold, a petition (accompanied by bill, Senate, No. 301) of Barry R. Finegold for legislation to establish the Massachusetts Information Privacy and Security Act. Economic Development and Emerging Technologies.
By Mr. Driscoll, a petition (accompanied by bill, Senate, No. 33) of William J. Driscoll, Jr. for legislation to establish the comprehensive Massachusetts consumer data privacy act. Advanced Information Technology, the Internet and Cybersecurity.
This bill (HD 1330) requires Massachusetts internet service providers (ISPs) to obtain explicit written customer consent before collecting, using, disclosing, or selling their personal information. It prohibits ISPs from charging extra fees or denying service to customers who do not provide this consent. The law also mandates that ISPs cannot sell personally identifiable customer data without express written authorization, which customers can revoke at any time in writing. This directly affects all ISPs operating in Massachusetts with state agreements or using state facilities, ensuring greater control over customer data privacy.
By Mr. Montigny, a petition (accompanied by bill, Senate, No. 1731) of Mark C. Montigny for legislation to promote transparency of facial recognition and driver's license photos. Public Safety and Homeland Security.
This bill establishes Massachusetts' first comprehensive data privacy law, directly affecting businesses that collect personal information from residents. It requires covered entities (primarily commercial businesses handling personal data) to obtain clear, specific consent for data processing - banning deceptive practices like "dark patterns" that trick users into sharing information. Key provisions include strict rules for handling biometric data, prohibiting the use of broad terms of service as consent, and creating new definitions for terms like "data broker." Small businesses with under $20 million annual revenue and certain nonprofits are exempt from most requirements.
